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Regulating Access to Content using a Multitiered Rule 

Base 

CROSS-REFERENCE TO RELATED APPLICATIONS 

This application is a continuation-in-part of U.S. Provisional Application No. 
60/421,051, filed October 25, 2002, and titled "Out-of-band Tokens for Digital Rights 
Management"; U.S. Application No. 10/334,144, filed December 31, 2002, and titled "Out- 
of-band Tokens for Rights Access"; U.S. Application No. 10/412,682, filed April 14, 2003 
and titled "Out-of-Band Tokens for Rights Access"; and U.S. Application No. 10/429,963, 
filed May 6, 2003 and titled "Electronic Loose-Leaf." These applications are incorporated 
by reference. 

TECHNICAL FIELD 

This document relates to content management systems. 

BACKGROUND 

The emergence of new technologies has created more channels for dissemination of 
content to which access is not necessarily authorized. Moreover, with digital copying tools 
and Internet-based distribution programs, content that has been accessed without 
authorization may be digitally copied many times without distortion. 

SUMMARY 

In one general sense, access to content may be regulated by accessing a medium 
associated with a content selection, identifying a profile associated with the medium, using 
the profile to analyze a content request with a multitiered rule base that includes two or more 
of a medium rule base, a media player rule base, and a host rule base, and enabling access to 
the content selection in accordance with the analysis. 

Implementations may include one or more of the following features. For example, 
identifying the profile may include identifying a reference such as, a unique serial number. 

A user accessing the content selection may be identified. Using the profile to analyze 
the content request may include determining an access right for the user for content identified 
by the profile. The content request may be reported to a reporting agent. Reporting the 
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